Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6091050EE2F11EB9C284C5DD8A014CE.roa
File: D6091050EE2F11EB9C284C5DD8A014CE.roa (raw, json)
Hash identifier: 3CZaFAny1lI04FsdhSRjMVo8hhsUsOEF+jjITWiGDww=
Subject key identifier: 2C:A0:D4:FD:09:BF:3D:79:B2:81:AA:F4:7A:97:A9:D8:4C:FA:49:D7
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 05F9
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6091050EE2F11EB9C284C5DD8A014CE.roa
Signing time: Mon 26 Jul 2021 16:38:16 +0000
ROA not before: Mon 26 Jul 2021 16:38:12 +0000
ROA not after: Tue 26 Jul 2022 16:38:12 +0000
asID: 397423
IP address blocks: 154.16.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jul 26 16:38:12 2021 GMT
Not After : Jul 26 16:38:12 2022 GMT
Subject: CN=60fee4f8-0f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d2:81:fd:fc:6c:41:36:8b:d9:2b:44:3b:92:
5d:c0:aa:d6:47:98:07:e6:e7:c7:e4:73:b7:f0:7a:
34:25:83:3c:78:cb:33:4e:f4:8f:7d:16:3b:35:6b:
b0:23:d0:5c:68:4a:9a:35:4d:c7:8f:8e:1b:6f:b3:
bb:70:ad:c9:dd:e1:7c:98:77:4f:b2:37:56:a6:33:
b9:29:26:d5:e0:f6:fc:75:d6:b2:9a:db:b5:1f:0e:
eb:61:63:0f:9b:50:56:be:89:ee:d0:3b:f4:3e:dc:
30:f1:ad:55:98:11:dc:9d:5a:d1:b0:a6:44:2d:07:
80:4d:54:c3:a9:a4:45:8e:ea:f0:e4:8a:1b:f5:92:
e4:0b:63:09:49:87:27:cc:56:ab:ea:79:8e:a0:13:
69:f5:51:78:d0:5e:56:62:1c:81:72:05:f8:3d:95:
e9:cf:3c:be:af:4b:44:23:b1:ed:64:19:7d:d1:fb:
9c:54:39:7f:73:64:37:92:a9:7f:d9:88:97:36:03:
16:94:06:f1:bd:50:7f:53:10:79:be:bf:15:eb:13:
62:6c:b7:83:43:b2:ce:3b:bc:c7:98:28:fb:27:9e:
e7:ec:c0:02:1d:58:c7:15:a6:41:b7:63:97:c6:45:
fc:f3:53:dc:a4:a1:3e:e6:e7:50:64:ad:53:43:d5:
20:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A0:D4:FD:09:BF:3D:79:B2:81:AA:F4:7A:97:A9:D8:4C:FA:49:D7
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6091050EE2F11EB9C284C5DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:fe:c6:74:6f:30:ef:23:15:38:78:dc:c3:a8:73:a4:a2:3b:
e7:79:b0:e6:59:df:5f:a9:3b:7a:d8:db:56:c5:60:ad:30:fb:
c7:1b:f0:c1:4c:f4:8a:89:bb:54:4f:e5:6e:e8:ea:84:0e:14:
ba:f2:b3:2f:f2:26:49:6f:e1:75:c4:31:b8:ba:aa:ec:0e:d3:
ea:47:3e:8d:e9:09:16:52:65:54:7a:68:7d:a2:89:bb:65:c8:
cb:0f:78:5d:1e:e4:1b:89:16:a4:7d:55:8f:f1:e4:7b:90:8a:
ed:d6:84:64:a5:56:cd:8a:da:ee:58:44:99:aa:dd:99:28:13:
7d:6e:d7:75:bc:8e:8d:a7:9c:b4:70:ee:b7:59:9a:74:ac:e7:
0e:73:b5:12:13:74:d8:27:30:24:31:e2:9a:73:61:a9:16:48:
63:c0:c0:a1:97:39:f3:77:28:44:1a:fc:27:7e:49:84:51:c1:
3b:f8:e6:92:5e:1a:68:d7:80:cd:db:b8:f0:63:52:cc:be:8a:
14:df:cb:90:91:7f:a0:9f:b1:68:02:27:f2:f9:07:02:d4:5a:
12:4d:57:8e:cf:bc:46:df:fb:0d:c5:db:4c:53:a1:97:b8:12:
c2:a2:94:89:c8:16:2b:d2:53:4b:35:e0:57:f9:83:74:90:b5:
16:e7:f4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:02 2023 by rpki-client on console-fra.rpki-client.org